A used Pixel with preinstalled GrapheneOS looks like a shortcut: the install is done and the bootloader is already relocked. The catch is that a security-focused OS is only as trustworthy as whoever installed it, and you did not watch them do it. This guide shows how to confirm the phone is running genuine, untampered GrapheneOS, and when the smarter move is to wipe it and install it yourself.
Quick Answer
Check four things. The phone should show a yellow boot notice, never an orange one. The verified boot key hash on that notice must match the one GrapheneOS publishes for your model. The Auditor app on a second Android phone should pass attestation. Then factory reset from recovery before you set it up. The GrapheneOS project’s own recommendation is to buy a supported Pixel and install GrapheneOS yourself, and if you have any doubt, reinstalling takes about half an hour and removes the question entirely.
Shop Unlocked Google Pixels on Swappa
Why You Will See Pixels Listed With GrapheneOS
Swappa allows phones running a custom ROM to be listed, and GrapheneOS counts as one. The listing rules require the seller to note the modification in the description, note any resulting limitations (on GrapheneOS, the big one is that Google Wallet tap-to-pay does not work), and make sure the phone is ready for activation in the category where it is listed. The listing still needs a clean IMEI and no activation or account locks, and real people approve it before it goes live.
So a Pixel listed as “running GrapheneOS” is allowed and not a red flag in itself. Plenty of owners simply move on to a newer phone and sell the old one as-is. What you cannot do from a listing alone is confirm that what is on the phone is what the seller says it is.
For the basics of GrapheneOS and which Pixels support it, see GrapheneOS Explained: What It Is and Which Pixel to Buy.
The Risk You Are Actually Managing
A tampered phone is rare, but the consequences are the exact thing GrapheneOS exists to prevent. Someone could leave the bootloader unlocked, install a modified build, or ship a phone that only looks like GrapheneOS. The project itself has warned about social media accounts impersonating it to sell devices, and it does not endorse or partner with any company selling phones with GrapheneOS preinstalled.
The good news is that Pixel hardware makes this checkable. Verified boot, published key hashes, and hardware attestation let you confirm the install without trusting the seller’s word.
Step 1: Read the Boot Screen
Power the phone off and back on, and watch the first few seconds.
| What you see | What it means | What to do |
|---|---|---|
| No warning, Google logo | Stock Android, locked bootloader | The phone is not running GrapheneOS. Install it yourself if that is what you want |
| Yellow notice: “Your device is loading a different operating system” | Alternate OS, bootloader locked | Expected for GrapheneOS. Move on to the key hash check |
| Orange notice: “The bootloader is unlocked” | Bootloader unlocked, software integrity cannot be guaranteed | Do not use it as-is. Reinstall GrapheneOS or restore stock |
An orange screen is the most common problem, and it is usually carelessness rather than malice: the previous owner skipped the relock step. It still means the phone’s software cannot be trusted, because anything could have been written to it. The notices clear on their own after about 10 seconds, so ask the seller for a short video of a full boot if you are buying remotely.
Step 2: Match the Verified Boot Key Hash
The yellow notice also shows an ID for the operating system, derived from the SHA-256 hash of its signing key. On the Pixel 6 and newer, the full hash is displayed.
GrapheneOS publishes the correct hash for every supported model on its web install page, at grapheneos.org/install/web, under the verified boot key hash section. Compare the string on your phone’s boot screen against the one listed for your exact model, character by character. A match confirms the phone is booting an OS signed with GrapheneOS’s official key. A mismatch means it is not official GrapheneOS, whatever the lock screen says.
Asking the seller to photograph the boot screen before you buy is a reasonable request, and a seller confident in the install will not mind.
Step 3: Run the Auditor App
The hash check proves which key signed the OS. Auditor, the attestation app GrapheneOS ships, goes further: it uses the phone’s secure hardware to confirm the device model, the OS, the bootloader lock state, and the patch level, in a way that is hard to fake.
You need a second Android phone running Android 13 or newer with Auditor installed. The results appear on that second phone, not on the one being checked, which is the point.
- Install Auditor on your second phone. It is available through the Google Play Store and the GrapheneOS App Store.
- Open Auditor on the used Pixel and choose to be audited. Open Auditor on your second phone and choose to audit.
- Scan the QR code on the auditing phone with the used Pixel, then scan the response code the Pixel shows with the auditing phone.
- Read the result on your second phone. It should report the correct Pixel model, GrapheneOS as the OS, a locked bootloader, and a current patch level.
The first pairing is the weakest, since it relies on the hardware’s factory attestation keys. Later checks between the same two phones pin those keys and get stronger. If you want ongoing monitoring, Auditor also supports scheduled remote verification through the attestation.app service, with email alerts if a check fails.
Step 4: Factory Reset From Recovery
Once the checks pass, GrapheneOS’s own instructions for a preinstalled phone say to factory reset it from recovery before you use it. This clears the previous owner’s data, profiles, and any apps or settings they left behind.
Boot into recovery mode from the powered-off state, choose the factory reset option, confirm, and reboot. Then set the phone up fresh with your own passcode.
When to Reinstall It Yourself
The checks above follow GrapheneOS’s official guidance for a preinstalled phone. Going a step further and reinstalling from scratch is stricter than what the project requires, but it is the cleanest option, and it is the one we would take if any of these apply:
- The boot screen showed orange at any point.
- The key hash did not match, or the seller would not show it.
- You do not have a second Android phone to run Auditor.
- The phone came from a seller advertising “custom,” “encrypted,” or “secure” phones as a product line rather than a person selling their own device.
- You simply want certainty.
Reinstalling means enabling OEM unlocking in developer options, unlocking the bootloader, and running the official web installer. Because the phone already ran GrapheneOS, its bootloader was unlockable, so you will not hit the carrier-lock wall that stops most installs. The previous owner may have turned OEM unlocking off after their install, which is the default, and you will need to turn it back on. The install itself follows the same steps in GrapheneOS Explained: What It Is and Which Pixel to Buy.
What to Check in the Listing Before You Buy
Verification happens after the phone arrives, but most problems can be spotted beforehand.
- Support window. A genuine install on an aging phone is still a poor buy. The Pixel 6 and 6 Pro reach end of support in October 2026. Prefer a Pixel 8a, Pixel 9a, or newer.
- Disclosure. The listing should say GrapheneOS is installed and note limitations. A listing that hides the modification is a problem in itself.
- Boot screen proof. Ask for a photo or video of the boot notice showing yellow and the full hash.
- Unlocked model. It is almost certainly an unlocked Pixel if it runs GrapheneOS, but the listing category should match.
- Standard used-phone checks. Clean IMEI and no Factory Reset Protection lock are Swappa listing requirements. IMEI Check: What It Reveals About a Used Phone and How to Test a Used Device Before You Buy cover the rest.
If the phone arrives and does not match the listing, for example it boots with an orange screen when the listing described a locked GrapheneOS install, it is not as described, and Swappa’s returns policy entitles you to a refund. Contact the seller first, then Swappa’s support team if needed.
Used Pixel prices vary with model, storage, and condition, so check current Swappa prices before you buy.
Shop Used Google Pixel Phones on Swappa
FAQ
Is it safe to buy a phone with GrapheneOS preinstalled?
It can be, if you verify it. Confirm the boot screen is yellow rather than orange, match the verified boot key hash against GrapheneOS’s published value, run the Auditor app from a second phone, and factory reset from recovery. The GrapheneOS project’s official recommendation is still to install it yourself.
What does the yellow screen on a Pixel mean?
A yellow notice at boot means the bootloader is locked and the phone is running an operating system signed with a key other than Google’s. That is the expected state for a correct GrapheneOS install. The notice shows the OS’s key hash, which you can compare with the value GrapheneOS publishes.
What does the orange screen on a Pixel mean?
An orange notice means the bootloader is unlocked, so the phone cannot guarantee the integrity of its software. A GrapheneOS phone should never show it after installation. If you see it, reinstall GrapheneOS or restore stock Android before trusting the phone.
Do I need a second phone to verify GrapheneOS?
For the Auditor attestation check, yes. The auditing phone must run Android 13 or newer, and the results appear on it rather than on the phone being checked. Without a second phone you can still check the boot screen and key hash, or reinstall GrapheneOS yourself.
Does GrapheneOS sell phones or endorse resellers?
No. GrapheneOS is not affiliated with and does not endorse any company selling phones with GrapheneOS preinstalled. It recommends buying a supported Pixel and installing GrapheneOS yourself.
The Bottom Line
A used Pixel with preinstalled GrapheneOS is fine to buy when the seller discloses it and the phone passes three checks: a yellow boot screen, a matching key hash, and a clean Auditor result. Factory reset it before use. If any check fails, or you want zero doubt, reinstall GrapheneOS yourself on an unlocked Pixel 8a or Pixel 9a, which costs you half an hour and nothing else.
